Slightly rework the cookie session stuff to create fewer interim objects and garbage (#504).
Inline methods (#504).
Move the client side session stuff to its own package and rename accordingly (#504).
Extract const (#504).